SSL VPN Group selection

[clark.d]

I know how to enable and create groups for use with SSL VPN Anyconnect. How can I lock user to the group I want to have access to? They can just select any group and get authenicated, but I want certain groups that can only see certain inside resources. Can this be done?

Thx

Dave

[Shilpa Gupta]

Hi Dave,

The feature that you are looking for can be achieved by making use of group-lock.

In order to configure group  lock, send the group policy name in the class attribute 25 on the Remote  Authentication Dial-In User Service (RADIUS) server and choose the  group in order to lock the user within the policy.

For example, in order to lock the Cisco 123 user into the RemoteGroup group, define the Internet Engineering Task Force (IETF) attribute 25 class OU=RemotePolicy for this user on the RADIUS server.

The following is the reference link:-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml

I hope it helps.

Thanks,

Shilpa

[wwmoon1983]

My devices is router cisco 2811 ,how should i do ?

thanks